Marquis Software Solutions
Disclosed Nov 26, 2025400,000 affectedConfirmed
Ransomware at bank marketing vendor Marquis exposes 400,000+ customers
Marquis, a marketing and compliance vendor to over 700 banks and credit unions, said an August 14, 2025 ransomware attack via a SonicWall firewall flaw exposed customer data including SSNs; state filings showed at least 400,000 affected.
What is known
| People affected | 400,000 (as reported by the organization) |
|---|---|
| Disclosed | Nov 26, 2025 |
| Discovered | Aug 14, 2025 |
| Happened | Aug 14, 2025 |
| Attack | Ransomware |
| Data exposed | NamesSocial Security numbersFinancialPayment cardsDates of birthAddresses |
| Sector | Finance · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Marquis Software SolutionsWashington Attorney General breach notice: Marquis Software SolutionsNotice letter filed with the Delaware DOJ: Marquis Software SolutionsOregon DOJ breach notice: Marquis Software SolutionsFintech firm Marquis alerts dozens of US banks and credit unions of a data breach after ransomware attackMarquis data breach impacts over 74 US banks, credit unionsTexas Attorney General data security breach report BR-0004697: Marquis Software SolutionsVermont Attorney General: 2026-03-16 Marquis Software Solutions Data Breach Notice to ConsumersVermont Attorney General: 2025-11-26 Marquis Software Solutions Data Breach Notice to Consumers
Notices filed
Washington AG269,773 peopleDelaware DOJ937 peopleVermont AGCount not statedDelaware DOJ937 peopleResearch400,000 peopleCalifornia AGCount not statedTexas AG354,289 peopleOregon DOJ13,169 peopleCalifornia AGCount not statedCalifornia AGCount not statedVermont AGCount not statedWashington AG269,773 people
History of this record
empty to https://ago.vermont.gov/document/2025-11-26-marquis-software-solutions-data-breach-notice-consumersby backfillSource
empty to https://ago.vermont.gov/document/2026-03-16-marquis-software-solutions-data-breach-notice-consumersby backfillSource
["names","ssn","financial"] to ["names","ssn","financial","payment-card","dob","addresses"]by backfillSource
tech to financeby seedSource
["names"] to ["names","ssn","financial"]by seedSource
empty to organizationby seedSource
empty to 400000by seedSource
empty to Marquis, a marketing and compliance vendor to over 700 banks and credit unions, said an August 14, 2025 ransomware attack via a SonicWall firewall flaw exposed customer data including SSNs; state filings showed at least 400,000 affected.by seedSource
empty to Ransomware at bank marketing vendor Marquis exposes 400,000+ customersby seedSource
[] to ["names"]by backfillSource
2025-12-02 to 2025-11-26by backfillSource
unknown to ransomwareby backfillSource
empty to 2025-08-14by backfillSource
2026-02-11 to 2025-12-02by backfillSource
2026-03-16 to 2026-02-11by backfillSource
empty to 2025-08-14by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.